arrow
返回

Dynamic Firewall Decomposition and Composition in the Cloud

delete2020-01-01
delete13
PRE
AI
S
Sima Bagheri
A
Alireza Shameli‐Sendi *
DOI:10.1109/TIFS.2020.2990786delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Firewalls filter malicious traffic and provide the network with a satisfying level of security. Thus, their performance is critical for the whole network. Rule-based firewalls are the most widely deployed among traditional ones. However, as the size of the rule list of a firewall increases, lookup latency increases significantly. One main solution to enhance the performance of a firewall is to reorder rules based on traffic characteristics to obtain the minimum number of packet matches. The optimal firewall rule ordering problem (ORO) is NP-Complete. Therefore, setting up a centralized firewall for a whole network is infeasible. Our proposed solution dynamically scales in and out firewalls across multiple administrative domains for more efficient rules optimization, filtering, and better attack response. The proposed solution, in this paper, outsources the firewall functions into micro firewalls, which are located in different places and have their configurations. Therefore, traffic is treated locally and in a distributed way. The experimental results show that our proposed solution is scalable regarding the organization's network requirements. Moreover, the central firewall is relaxed executing rules optimization algorithms in consecutive time intervals, inefficiency.
Keyword:
Cloud computing
Firewalls (computing)
Optimization
Quality of service
Scalability
Delays
Firewall
optimization
rule ordering problem
firewall decomposition
firewall composition
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

IEEE Transactions on Information Forensics and Security 封面图
IEEE Transactions on Information Forensics and Security
IF:
8
论文数:
5.3K
被引数:
2.3W

机构

S
Shahid Beheshti University
学者数:
7.6K
论文数: 6.8K
被引数: 6.9K
引用论文

引用论文

Persistent infection of bovine herpesvirus type 4 in bovine endothelial cell cultures
err1999-10-01
err0
PREAI
errTsun-Mei Lin; Guey-Yueh Shi; Shinn-Jong Jiang; Chi-Fong Tsai; Bor-Jang Hwang; Cheng-Ta Hsieh; Hua-Lin Wu
err分享
err收藏
Tumbleweed
err1991-03-01
err0
PREAI
errJames A. Young
err分享
err收藏
Improving cloud network security using the Tree-Rule firewall
err2014-01-01
err35
errOAAI
errHe, Xiangjian; Chomsiri, Thawatchai; Nanda, Priyadarsi; Tan, Zhiyuan
err分享
err收藏
Iodine deficiency disorder in children aged 6–12 years of Ambala, Haryana
err2013-06-28
err0
PREAI
errChintu Chaudhary; R. Pathak; S. K. Ahluwalia; R. K. D. Goel; S. Devgan
err分享
err收藏
A novel free-mounting system for protein crystals: transformation and improvement of diffraction power by accurately controlled humidity changes
err2000-10-01
err0
PREAI
errReiner Kiefersauer; Manuel E. Than; Holger Dobbek; Lothar Gremer; Marcos Melero; Stefan Strobl; João M. Dias; Tewfik Soulimane; Robert Huber
err分享
err收藏
Firewall Fingerprinting and Denial of Firewalling Attacks
err2017-07-01
err14
errOAAI
errLiu, Alex X.; Khakpour, Amir R.; Hulst, Joshua W.; Ge, Zihui; Pei, Dan; Wang, Jia
err分享
err收藏
Prediction of the Effects of Variants and Differential Expression of Key Host Genes ACE2, TMPRSS2, and FURIN in SARS-CoV-2 Pathogenesis: An In Silico Approach
err2021-10-26
err0
errOAAI
errMd. Shahadat Hossain; Mahafujul Islam Quadery Tonmoy; Atqiya Fariha; Md. Sajedul Islam; Arpita Singha Roy; Md. Nur Islam; Kumkum Kar; Mohammad Rahanur Alam; Md. Mizanur Rahaman
err分享
err收藏
Cross-Domain Privacy-Preserving Cooperative Firewall Optimization
err2013-06-01
err13
PREAI
errChen, Fei; Bruhadeshwar, Bezawada; Liu, Alex X.
err分享
err收藏
学者 查看更多内容